Configurable Administrator Permissions

[PoomsXP]

Feature Request: Configurable Administrator Permissions

It would be useful to introduce configurable administrator permissions, similar to the existing subuser permission system. This would allow administrators to access specific features without requiring full administrative privileges.

Currently, administrator access is largely all-or-nothing. A more granular system would allow panel owners to delegate responsibilities to support staff and other team members without exposing unrelated or sensitive features.

Proposed Permissions

• Access All Servers — Allows access to the Servers tab, excluding individual server dashboards by default. Subpermissions could include:
  • Manage Servers — Read: Read-only access to server dashboards.
  • Manage Servers — Write: Normal administrative access to server dashboards.
  • Use Admin Server Actions: Allows deleting, transferring, and reinstalling servers.
  • Edit Build Configurations & Startup: Allows editing server build configurations and startup settings.
  • Edit Details & Suspend Servers: Allows suspending servers and editing details like server names, owners, identifiers and descriptions.
• Manage Users — Access to user management, excluding administrator permission editing.
• Manage Eggs — Manage eggs and tags.
• Manage Nodes and Locations — Manage nodes and locations.
• Configure Databases — Access database configuration.
• Access Audit Log — Access to the audit log.
• Configure Extensions — Configure installed extensions without installing or uninstalling them.
• Manage General Settings — Access the Settings tab.
• Administrator — Full administrative access, including extensions, mounts, API keys, and permission editing, preserving current behavior.

This would provide a more flexible and secure way to delegate administrative responsibilities while following the principle of least privilege, allowing team members to manage what they need without granting unnecessary access to the rest of the panel.